Avatar
franzap
726a1e261cc6474674e8285e3951b3bb139be9a773d1acf49dc868db861a1c11
Building nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8 and #purplestack | BA 🇦🇷

Released a web interface to the WoT API

Using servers to do the heavy lifting + clients to verify

https://video.nostr.build/fb517d3345b33b13bd23e83ec45097e9147a1520cfff229397256d0593c4f3ae.mp4

https://trustgraph.live

This dumb-ass politician barely knows how to read

Probably no one in Entre Rios gives a fuck about this

Viva la blockchain! 🤡

Not persuaded.

Fedi open source where exactly?

Mostly open source is a thing now?

Interesting observation. Signing with another npub could also be offered for a specific area of an app, so as not to override actual user customizations.

WoT alone does not suffice and that's why since Madeira we've been talking about having other trust indicators like

- Certificates, domain names or valuable namespaces (like the github link we show on zap.store when about to install); domains could also be used as authority to point to a PGP key or certificate an app is signed with

- Curators and external verifier services (which might have an non-nostr reputation, i.e. a known brand, Wallet Scrutiny comes to mind for reproducible build attestations)

- Permission restrictions (do you care about the internals of your keyboard app if it's totally restricted to the network and other apps at the OS-level? Worst case you don't enjoy it and uninstall)

Yeah agree.

My main issue is internet connectivity. It's currently very difficult to know if two proprietary Android apps are sending messages to each other and leaking private information. There is no app isolation at this level even in GrapheneOS.

Fedi, Keet and Fountain are closed source, proprietary apps popular in the wider bitcoin ecosystem.

I personally feel uncomfortable installing them.

Can closed source apps be considered freedom tech?

I see it now. Basically one Android FOSS app there, Krita. Checked and they don't publish releases to github